$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bd164d24-2828-3f3e-8c4d-9e9fbbe94557.roa File: bd164d24-2828-3f3e-8c4d-9e9fbbe94557.roa (raw, json) Hash identifier: whommjaG86NZ3glipaeYCoNdCCrbeKnBMU71NceTrmE= Subject key identifier: C9:A9:3C:9E:1D:DC:95:D5:9F:1A:96:96:D1:5B:03:76:40:40:51:9F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24DF9643CF153C4B7456F000 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bd164d24-2828-3f3e-8c4d-9e9fbbe94557.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 2604:2d80:bd00::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:96:43:cf:15:3c:4b:74:56:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=ea830568-9c32-4dba-80af-6dfe63e4973a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:62:dc:4e:7d:19:22:8c:6c:42:e8:83:5e:54: 0d:1f:cd:e8:be:9d:c9:6c:39:68:b0:74:dc:09:51: 00:f1:fd:cd:00:ef:eb:9b:a4:83:8f:4d:53:08:45: f3:55:ec:01:3f:b6:ba:a5:ad:cd:28:94:bd:ea:23: dc:92:5b:30:b8:32:e9:8c:51:a9:c6:b7:9a:03:a0: b4:77:d2:90:3f:9d:6f:ff:27:3f:83:e6:0e:0a:f4: d6:51:1f:b1:9e:60:36:bd:92:a6:40:10:c2:6d:d7: a5:3e:35:d5:e5:bc:4b:5b:b0:f4:e0:35:bf:ab:30: 2e:2c:b6:0e:f9:1c:5b:e4:66:6d:43:2a:c5:27:ff: 72:9c:51:22:82:c5:e1:2a:70:01:ae:28:79:d6:a5: 19:2e:bd:b2:6b:4a:3a:1c:bd:ab:52:2f:9e:1e:07: bc:87:c8:69:5b:a6:b8:02:60:84:24:34:ac:f8:a1: 72:cd:76:7c:1e:b7:44:32:57:7e:3d:7f:5c:71:32: ce:3a:87:dc:e6:61:23:4b:d7:45:b0:3a:f8:0b:0f: d1:50:4a:53:25:db:43:62:b9:0a:55:e9:d8:f1:84: 0a:36:97:2c:d5:c5:4b:2a:ed:15:08:97:f8:ac:ff: 1e:f9:81:fe:e9:1f:77:53:74:3b:e0:a1:3e:b6:b7: 98:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:A9:3C:9E:1D:DC:95:D5:9F:1A:96:96:D1:5B:03:76:40:40:51:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bd164d24-2828-3f3e-8c4d-9e9fbbe94557.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d80:bd00::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:26:ee:27:d6:c0:d7:8c:64:66:09:3d:f4:5b:72:4e:c0:ec: 80:ca:5e:f2:a8:7f:02:70:88:85:2f:0f:70:f7:0a:e0:f6:11: 1d:f0:46:1e:61:5f:8c:79:88:c5:3e:ed:96:c4:64:17:7a:71: 7e:e2:85:76:65:c3:1b:81:42:f2:e4:ff:4d:67:48:ab:33:ba: 68:65:5d:59:40:bd:73:be:bc:c0:d6:b6:ba:d0:2c:5c:6e:18: a0:a9:50:42:13:e6:65:5b:bf:23:d6:da:89:d0:4b:b8:6f:23: 25:05:a2:2e:82:3d:5e:ac:ec:5b:e8:39:53:96:8c:3c:7b:08: 7c:31:29:ea:9e:3b:23:54:0f:e8:c6:de:c3:38:46:48:34:fa: 1b:dc:ca:49:46:e4:a6:21:13:26:d1:25:77:81:b3:00:4e:cd: 82:ed:95:43:a3:04:ee:89:b7:eb:6d:6f:80:2a:7a:39:ed:88: b6:d9:d4:96:48:17:72:2e:dd:36:4a:9f:06:00:ad:9f:b7:ce: 2b:1f:9d:1d:78:98:ff:04:af:fd:17:79:ce:41:91:5c:7c:9f: 62:f7:62:49:ed:9e:ad:ea:7e:64:6f:a0:d7:64:70:ac:5b:b1: 08:1d:00:f7:28:8a:db:d2:91:c0:2b:9d:0a:ec:5a:1e:d9:87: c9:bf:0b:98 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k35ZDzxU8S3RW8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZWE4MzA1NjgtOWMzMi00ZGJhLTgwYWYtNmRmZTYzZTQ5NzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2LcTn0ZIoxsQuiDXlQNH83ovp3JbDlosHTc CVEA8f3NAO/rm6SDj01TCEXzVewBP7a6pa3NKJS96iPcklswuDLpjFGpxreaA6C0 d9KQP51v/yc/g+YOCvTWUR+xnmA2vZKmQBDCbdelPjXV5bxLW7D04DW/qzAuLLYO +Rxb5GZtQyrFJ/9ynFEigsXhKnABrih51qUZLr2ya0o6HL2rUi+eHge8h8hpW6a4 AmCEJDSs+KFyzXZ8HrdEMld+PX9ccTLOOofc5mEjS9dFsDr4Cw/RUEpTJdtDYrkK VenY8YQKNpcs1cVLKu0VCJf4rP8e+YH+6R93U3Q74KE+treYuQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMmpPJ4d3JXVnxqWltFbA3ZAQFGfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmQxNjRkMjQtMjgyOC0z ZjNlLThjNGQtOWU5ZmJiZTk0NTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgL0A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHUm7ifWwNeMZGYJPfRbck7A7IDKXvKofwJwiIUvD3D3CuD2ER3w Rh5hX4x5iMU+7ZbEZBd6cX7ihXZlwxuBQvLk/01nSKszumhlXVlAvXO+vMDWtrrQ LFxuGKCpUEIT5mVbvyPW2onQS7hvIyUFoi6CPV6s7FvoOVOWjDx7CHwxKeqeOyNU D+jG3sM4Rkg0+hvcyklG5KYhEybRJXeBswBOzYLtlUOjBO6Jt+ttb4AqejntiLbZ 1JZIF3Iu3TZKnwYArZ+3zisfnR14mP8Er/0Xec5BkVx8n2L3Ykntnq3qfmRvoNdk cKxbsQgdAPcoitvSkcArnQrsWh7Zh8m/C5g= -----END CERTIFICATE-----Generated at Thu Mar 26 10:56:02 2026 by rpki-client